---
cve: "CVE-2025-37111"
severity: "MEDIUM"
cvss: 6.0
epss: "0.1%"
vendor: "Hewlett Packard Enterprise"
kev: false
exploited: false
published: "2025-07-31 20:15:32"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T10:59:38+02:00"
---

# CVE-2025-37111

> 6.0 MEDIUM

## Beschreibung

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-37111) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_